This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
File:                     WyxHDbJENILhlSOVOnjB7woWlHk.cer (raw, json)
Hash identifier:          ZdtGfgKV7FRO550qNVuPSzkD8gEjRri8HYyn3aKmziI=
Subject key identifier:   5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019AE3A1163E9FB35963DC947FBF88A8C7A6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 03 Dec 2025 09:52:56 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209719
                          IP: 193.107.67.0/24
                          IP: 2001:67c:940::/48
                          IP: 2a04:e1c0::/31
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e3:a1:16:3e:9f:b3:59:63:dc:94:7f:bf:88:a8:c7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec  3 09:52:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5b2c470db2443482e19523953a78c1ef0a169479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:82:ce:f4:69:5d:88:26:a7:96:8a:03:42:79:
                    56:0f:8b:1f:b6:72:7f:b0:7e:fc:ee:6c:d2:6d:91:
                    9f:ab:50:a8:06:4d:6a:9a:39:ed:98:8f:e2:fe:dd:
                    8f:5a:f6:f0:da:33:42:64:12:55:b1:14:f5:a6:b9:
                    81:d0:c2:67:3b:2f:2c:21:04:f5:ae:7d:63:1e:80:
                    30:b9:25:15:e3:ff:92:33:d6:2e:c8:dc:1a:03:36:
                    eb:4a:78:4a:92:d9:38:f9:0f:8f:40:23:06:32:61:
                    e3:71:76:78:b8:7e:ee:a5:3c:10:ba:9c:bb:33:ad:
                    76:fe:6b:97:84:49:c6:2d:2d:ae:16:52:0f:8c:08:
                    12:03:17:b3:c6:62:01:c5:6e:f9:3f:44:89:01:78:
                    b7:61:13:79:e4:db:e4:bd:1d:ac:74:84:4d:7e:99:
                    38:39:83:54:85:18:2f:6e:1c:b5:24:a4:aa:9a:a1:
                    62:1b:60:79:03:d4:b2:c6:fc:06:7b:1e:bf:67:3a:
                    7f:47:ea:83:a2:d4:bf:b5:4b:9d:2e:21:9c:ed:c2:
                    c5:bf:88:79:cd:16:b0:a8:49:6b:8e:bd:ee:7e:26:
                    4e:c8:d6:c7:41:47:83:c7:72:82:a7:81:67:14:d4:
                    7b:18:d1:23:91:b9:26:c2:1d:95:de:92:00:64:86:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.67.0/24
                IPv6:
                  2001:67c:940::/48
                  2a04:e1c0::/31

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209719

    Signature Algorithm: sha256WithRSAEncryption
         18:c8:50:cf:5a:00:05:44:15:9f:21:75:3b:34:30:3c:18:3d:
         ab:4a:74:36:bb:55:e7:e0:5b:8b:6f:42:b2:55:20:1d:24:20:
         bf:e2:2d:50:a1:aa:a1:be:51:3d:00:08:b8:13:ad:be:88:73:
         a6:49:76:84:d9:0e:21:3a:b0:16:c5:25:40:da:69:cf:6f:f9:
         d1:d0:30:d6:35:2c:ac:cb:99:48:89:12:fb:89:d9:f8:08:22:
         5a:d1:b9:0d:94:e3:12:81:26:ec:c2:1b:48:5a:72:93:3e:0a:
         b4:7e:4d:6b:96:23:94:57:81:0f:ca:05:05:6e:8d:d9:27:55:
         88:b4:dd:f2:31:21:46:e1:96:f8:53:8a:ae:0e:da:ba:c3:b9:
         e5:cd:79:85:25:bf:07:eb:15:8d:6a:b9:e5:f1:51:48:a8:8d:
         8b:fe:09:71:fe:9f:e6:00:d1:fa:86:a3:9f:4d:eb:53:da:cd:
         3a:d3:a6:12:4f:e1:ff:8d:f2:18:28:cd:c4:ad:95:af:47:d9:
         6c:ab:26:8f:f9:d4:b4:8c:a7:00:4c:79:28:64:9c:33:cb:29:
         5f:50:dd:5b:a7:2b:12:a0:a1:b8:b9:b6:12:8e:b3:5a:33:2a:
         45:3d:e9:5a:58:62:9e:65:ea:5c:23:96:43:c6:71:68:a8:59:
         66:db:5a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:45:06 2025 by rpki-client